Latest caddy (master branch) and go.mod is more clean now and can run go get -u without manually downgrading cel-go and go.step.sm/crypto:

github.com/google/cel-go is bumped to v0.20.0, as well as several other dependencies.